CVE-2021-30471: Medium severity podofo vulnerability
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.
Other sources
A flaw was found in PoDoFo. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.
Reference: https://sourceforge.net/p/podofo/tickets/131/
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30471?
CVE-2021-30471 has a severity level that may lead to significant operational impacts due to the potential for stack overflow.
How do I fix CVE-2021-30471?
To address CVE-2021-30471, update PoDoFo to a version above 0.9.7 or apply relevant security patches provided by the distribution.
What software is affected by CVE-2021-30471?
CVE-2021-30471 affects PoDoFo versions 0.9.7 as well as specific packages such as libpodofo on Debian and Fedora systems.
What type of flaw is identified in CVE-2021-30471?
CVE-2021-30471 is characterized by an uncontrolled recursive call causing a stack overflow in the PdfNamesTree::AddToDictionary function.
Can CVE-2021-30471 lead to remote code execution?
While CVE-2021-30471 primarily results in a stack overflow, it does not directly indicate the potential for remote code execution.